Tool
PackerScope
PackerScope scans Windows PE executables for packer signatures and structural indicators, including entropy, sections, imports and entry-point instructions. It can invoke supported unpackers and check PE integrity, entropy and import-table recovery before generating reports.
- Targets
- Binary
- Category
- Native analysis tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Prerequisites: Python 3.10–3.13 is listed as the supported range.
- Prerequisites: Capstone, yara-python and ppdeep are optional analysis dependencies.
- Prerequisites: UPX unpacking requires an external upx executable.
- License: MIT licence.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · salmanmallah/packerscope · Revision db2ea6d
More in Native binaries
- imprint · Tool
- kdemulator · Tool
- DownUnderCTF: masked-squares flag checker · Case study
- Show Your Work: a measured dissection of REA's evidence architecture · Case study
- Windows loader: static malware analysis with REA and Codex · Case study
- OpenBSD netcat: static REA and Ghidra investigation · Case study